Search This Blog
Powered by Blogger.

Blog Archive

Labels

Footer About

Footer About

Labels

Load More
Trendy Right Now

Popular Posts

Showing posts with label Advertising Scams. Show all posts
fake websites
Advertising Scams Amazon Cyber Fraud. Cyberscams Cybersecurity Delivery Scam fake websites

Amazon Handbook Warns About Online Shopping and Delivery Box Scams

 

Online shopping has become the new norm with millions of people shopping through online platforms like Amazon and Flipkart. Unfortunately, online shopping comes with its own set of risks as frauds and scammers always look for ways to take advantage of people who shop online. Fake websites, false delivery packages, payment frauds and ‘too-good-to-be-true’ deals are some of the methods used by fraudsters. 

Amazon’s new consumer handbook created by Safer Internet India aims to provide online shoppers with information that can help protect them against online frauds and scams. The book highlights some of the key online shopping scams that are currently affecting shoppers. It provides a vital reminder that shopping online involves many risks and consumers need to be wary of the various online scams that they might stumble upon.  

According to the article, one of the scams highlighted in the book is the Delivery Box scam. When customers shop on e-commerce sites like Amazon or Flipkart, the products they purchase usually come in a box with delivery information. According to the new book, the delivery box usually has the customer’s personal information including their names, email address, telephone number and sometimes the item that has been delivered. After removing the item from the box, many customers usually throw away the box without removing the personal information on the delivery label.

According to the report, fraudsters usually collect discarded delivery boxes with personal information and use the information to contact the customers. The fraudster pretends to be a delivery executive and informs the customer that they need their feedback on the product they purchased. The fraudster further explains that the customer stands to receive a discount of 10% or more if they click on a link provided to give feedback. According to the article, the link provided by the scammer contains malware which infiltrates the customer’s device and gathers private information including banking credentials. 

The article informs consumers that they should consider using a sharp object like a knife to scratch off personal information on delivery packaging before throwing the box away. Alternatively, they could use a permanent marker to mask vital information on the delivery box. The Identity Protection Roller Stamp ID could also be considered to protect personal information. 

Moreover, consumers should be wary of random discount offers and avoid clicking on links provided by unknown individuals or entities. The consumer handbook and warning on Delivery Box scams can help shoppers identify online frauds and protect themselves from falling victim to online scams.
Read more »
Vo1d Botnet
Advertising Scams Android TV IoT malware Network Security Vo1d Botnet

Android TV Users Watch Out: Dangerous Vo1d Botnet Hits 1.6 Million Devices

Android TV Users Watch Out: Dangerous Vo1d Botnet Hits 1.6 Million Devices

Hackers are upping their game, getting better through attacks and strategies. The latest incident of this rise is the disturbing spread of the Vo1d malware botnet. Vo1d is a highly sophisticated malware and infected around 1,590,299 Android TV devices throughout 226 countries, changing them into “anonymous proxy servers" for malicious activities. 

Why is Vo1d malware so dangerous?

Vo1d is considered dangerous because of its persistence and potential to expand despite earlier discoveries by cybersecurity experts.

Research by Xlab suggests Void had 800,000 active bots, “Peaking at 1,590,299 on January 14, 2025.” Experts believe the botnet is being rented to hacking groups for various illegal activities, from escaping regional internet restrictions to ad frauds. 

Vo1d’s campaign trend suggests that the devices are leased out and then returned, causing a sharp rise and fall in the number of active bots in particular regions. The highest impact has been noticed in South Africa, Argentina, Brazil, China, and Thailand.

About Vo1d Malware 

Vo1d is not your average Joe, it is one of the most advanced and biggest malware in recent years, outperforming deadly botnets such as Bigpanzi and Mirai. Its Command and Control (C2) framework uses 2048-bit RSA encryption and Domain Generation Algorithms, making it indestructible. Vo1d uses 32 DGA seeds to create over 21,000 C2 domains, making it operational despite attempts to close its network.

It transforms infected devices into proxy servers, allowing threat actors to reroute malicious traffic via infected devices, hiding their source location and escaping detection. 

The proxies are then used for various illegal activities such as:
  1. Illegal Transactions
  2. Security evasion 
  3. Advertising Frauds

What makes Vo1d even more dangerous is its evolving nature

V01d is considered a severe threat due to its “evolving nature”. According to Forbes, the “latest version includes enhanced stealth capabilities and custom XXTEA encryption, further complicating detection and removal efforts.” In case researchers can register a C2 domain, they “can’t issue commands to disable the botnet due to the strong encryption measures in place."

The malware also uses special plugins like Mzmess SDK, used for ad-clicking scams. The SDK allows the botnet to mimic “human-like” interface, scamming advertising networks into payments. Vo1d can also harvest system data such as IPs, device specs, and network info from compromised devices. This can trigger further attacks. 

Evolution of Vo1d malware

Another important highlight about Vo1d’s expansion is its attack strategy. Although the experts don't know the infection vector, they believe the malware distributes via harmful firmware updates, Android TV system vulnerabilities, or sideloaded apps. Experts also suspect that illegal streaming services and infected third-party app stores may contribute to spreading the malware.

Tips to Stay Safe

IoT and Android TV users should follow these precautions to lower the chances of attacks:
  1. Update update update! Hackers exploit vulnerabilities in outdated software. 
  2. Buy IoT devices and Android TV from authorised manufacturers. Avoid third party sellers. 
  3. Disable “remote access” (if enabled) on your Android TV and IoT device, unless absolutely needed. 
  4. Only install apps from Google Play Store. Avoid installing apps from third-party.
  5. Disconnect inactive devices from the internet, if not in use.
  6. Use a network monitoring tool to identify malicious internet traffic patterns and find out about a compromised device.

Users should be more careful

Xlab warns about the dangers of Vo1d malware, “Many users harbor misconceptions about the security of TV boxes, deeming them safer than smartphones and thus rarely installing protective software.” 

Higlighting the dangers of using modded apps and software, Xlab says the “widespread practice of downloading cracked apps, third-party software, or flashing unofficial firmware—often to access free media—greatly increases device exposure, creating fertile ground for malware proliferation.”
Read more »
Subscribe to: Posts (Atom)